[rmcdaniel]

Part of #325.

This lands twelve open native PRs in one CI cycle. Each one's required checks passed on its own head, but strict branch protection put them back behind main after every merge, so landing them one at a time meant twelve serial CI cycles.

The branch merges each PR's exact current head, so GitHub marks each of them merged when this lands:

• Rust server: refuse malformed input envelopes like published PHP #606 at 936c2dbe6: Rust server: refuse malformed input envelopes like published PHP
• Admit queries while a workflow task is open, like PHP #619 at 7faaf93aa: Admit queries while a workflow task is open, like PHP
• Wait for an unreachable database at startup, like PHP #620 at 22e70d5c7: Wait for an unreachable database at startup, like PHP
• Give signal task claims the signal's arguments, like PHP #621 at 1d356d8a0: Give signal task claims the signal's arguments, like PHP
• Retry failed workflow tasks with their messages and apply argument-less signals as true, like PHP #625 at 48aadb899: Retry failed workflow tasks with their messages and apply argument-less signals as true, like PHP
• Apply search attribute upserts and typed list queries like PHP #622 at c0da48c13: Apply search attribute upserts and typed list queries like PHP
• Deliver cancellation to a parallel timer group, like PHP #624 at 5b3194965: Deliver cancellation to a parallel timer group, like PHP
• Rust server: report repair candidates like published PHP #610 at c5929cadf: Rust server: report repair candidates like published PHP
• Rust server: repair workflow runs like published PHP #611 at 4fbe61802: Rust server: repair workflow runs like published PHP
• Native: read PHP's legacy settings and refuse ones it cannot honor #616 at 28741de99: Native: read PHP's legacy settings and refuse ones it cannot honor
• Native: activity deadlines and late-result receipts like PHP #617 at 9f7e063c9: Native: activity deadlines and late-result receipts like PHP
• Authenticate database runtime credentials and the none driver like PHP #627 at faac0d453: Authenticate database runtime credentials and the none driver like PHP

Conflicts resolved

• Every conflict was in the port doc's known-gap list or the test module list, where both sides add lines, so both sides were kept.
• Three gap bullets came back that this train closes. They are removed again:
  • Malformed input envelopes (Rust server: refuse malformed input envelopes like published PHP #606);
  • Queries while a workflow task is open (Admit queries while a workflow task is open, like PHP #619);
  • Search attribute upserts (added by Retry failed workflow tasks with their messages and apply argument-less signals as true, like PHP #625, implemented by Apply search attribute upserts and typed list queries like PHP #622).
• The main.rs merge of Wait for an unreachable database at startup, like PHP #620 and Native: read PHP's legacy settings and refuse ones it cannot honor #616 nested Native: read PHP's legacy settings and refuse ones it cannot honor #616's setting tests inside Wait for an unreachable database at startup, like PHP #620's startup tests; the module is restored.
• Authenticate database runtime credentials and the none driver like PHP #627's credential settings now read their legacy WORKFLOW_SERVER_* names through Native: read PHP's legacy settings and refuse ones it cannot honor #616's shared helper.

Verification on the combined source

• The full suite on SQLite, PostgreSQL and MySQL passed, apart from one MySQL failure:
  • 346 integration tests and 200 library tests on each database, plus the upgrade tests;
  • the one failure, worker_reported_range_failure_requires_explicit_original_task_repair_across_restarts, read repair_needed right after a repair on the slow MySQL run (868 s).
• Cause of that failure. Published Workflow dispatches a replay-blocked run's repaired task, as it does an overdue run's. Native marked only the overdue path's task dispatched, so once three seconds had passed since the task was created, the repaired run read as overdue.
• Fixed here (6c4ef39), with a regression check that the repaired task's dispatch time is at or after its repair. The check fails without the fix and passes with it.
• After the fix and the final merges of Authenticate database runtime credentials and the none driver like PHP #627's fault test and main:
  • the full SQLite suite passes (347 integration, 200 library, upgrade tests);
  • the task retry, repair, role token and runtime credential tests pass on PostgreSQL and MySQL (24 each).

No checkpoint file: each included PR carries its own.

[sonarqubecloud]

Quality Gate passed

Issues
14 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.6% Duplication on New Code

See analysis details on SonarQube Cloud